[release-announce] tripleo-heat-templates 15.1.0

no-reply at openstack.org no-reply at openstack.org
Mon Oct 18 17:04:07 UTC 2021


We eagerly announce the release of:

tripleo-heat-templates 15.1.0: Heat templates for deploying OpenStack
with OpenStack.

The source is available from:

    https://opendev.org/openstack/tripleo-heat-templates

Download the package from:

    https://tarballs.openstack.org/tripleo-heat-templates/

For more details, please see below.

15.1.0
^^^^^^


Prelude
*******

Environment file collectd-write-qdr.yaml no longer specifies a default
CollectdAmqpInstances hash.

Enablement of data collection and transportation to an STF instance is
now handled via existing templates.


New Features
************

* Added new heat role specific parameter option 'DdpPackage' to
  select the required DDP Package.

* Added new heat role specific param OVNAvailabilityZone to set
  availability-zones for ovn. This param replace seting availability-
  zones throught OVNCMSOptions

* Adds two new parameters 'IronicAuthStrategy' and
  'NeutronAuthStrategy' that defaults to 'keystone'. This would allow
  deploying standalone ironic and neutron services without keystone
  using different 'auth_strategies' like 'http_basic' and 'noauth'.

* The libvirt driver has added support for hardware-offloaded OVS
  with vDPA (vhost Data Path Acceleration) type interfaces. vDPA
  allows virtio net interfaces to be presented to the guest while the
  datapath can be offloaded to a software or hardware implementation.
  This enables high performance networking with the portablity of
  standard virtio interfaces.

  Nova added support for vhost-vdpa devices in Wallaby.

* Added OVN DBs clustering support. In this service model, a
  clustered database runs across multiple hosts in multi-active mode.

* To help operators protect their workload, they can now enable the
  KernelArgsDeferReboot role parameter. This will prevent the tripleo-
  kernel ansible module from automatically rebooting nodes even if
  KernelArgs were changed unexpectedly.

* To support Glance Distributed Image Import, adding configuration
  of "worker_self_reference_url" by providing the internal API URL for
  each node where glance api will run with glance-direct method of
  image-import is enabled.

* Add param NeutronAgentDownTime to configure neutron server
  agent_down_time Seconds to regard the agent as down; should be at
  least twice report_interval, to be sure the agent is down for good.
  agent_down_time is a config for neutron-server, set by class
  neutron::server report_interval is a config for neutron agents, set
  by class neutron

* The new "ApacheTimeout" parameter has been added, which determines
  the timeout used for IO operations in Apache.

* The following parameters add support for mounting Cinder's image
  conversion directory on an external NFS share.

  * CinderImageConversionNfsShare

  * CinderImageConversionNfsOptions

* A new "CinderPolicyEnforceNewDefaults" parameter adds the ability
  to disable Cinder's deprecated authorization policies. The default
  value is False, which means Cinder's deprecated policies are
  enabled. Setting the parameter to True disables the deprecated
  policies, which causes Cinder to enforce the project-admin, project-
  member, and project-reader RBAC personas. Support for system
  personas is planned for a future release.

* Enable image copy for multiple RBD Glance stores

  Previously when using multiple RBD glance stores the operator was
  responsible for copying the image to all stores. Nova-compute now
  has the ability to automatically copy an image to the local glance
  store when required. This change enables the feature and adds the
  following role specific parameters to control the behaviour.

  * "NovaGlanceRbdCopyPollInterval"

  * "NovaGlanceRbdCopyTimeout"

* A new Heat parameter HAProxyConfigBackendSyntax news drives the
  generation of HAproxy configuration. Prior to that, every service
  was mapped to a 'listen' section in the configuration. Now a service
  definition is split in two sections 'frontend' and 'backend', which
  allow for more complex proxying configurations.

* New configuration "IronicDefaultBootMode" allows to change the
  default boot mode to use for bare metal instances. The default for
  now remains "bios" for legacy BIOS boot but may switch to "uefi" in
  the future.

* The new "MemcacheUseAdvancedPool" parameter is added which enables
  usage of advanced poll for memcached connections in keystone
  middleware. This parameter is set to "true" by default to avoind
  bursting connections in some services like neutron.

* This change adds functionality to enable modular libvirt daemons.
  All these daemons runs in its respective container. Also the default
  configuration is to use modular libvirt daemons instead of
  monolithic libvirt daemon. Here is the list of libvirt daemon which
  are added in this change. - virtnodedevd - virtproxyd - virtqemud -
  virtsecretd - virtstoraged

  It's possible to define the individual log filters for each one of
  these daemon using the following new parameters: -
  "LibvirtVirtlogdLogFilters" - "LibvirtVirtsecretdLogFilters" -
  "LibvirtVirtnodedevdLogFilters" - "LibvirtVirtstoragedLogFilters" -
  "LibvirtVirtqemudLogFilters" - "LibvirtVirtproxydLogFilters"

  More information regarding modular libvirt daemons is available
  here. *Libvirt Daemons <https://libvirt.org/daemons.html>* _.

* Introduce new parameters {{role.name}}NetworkConfigUpdate. This
  will be a bool. When {{role.name}}NetworkConfigUpdate is True
  existing network configurations will be updated. By default, this is
  False and only new deployments will have the networks configured.
  This parameter is role based only, with no global option.

* New config options for Neutron logging service plugin
  configuration were added. There are options added for L3 Agent:
  "NeutronL3AgentLoggingRateLimit", "NeutronL3AgentLoggingBurstLimit",
  "NeutronL3AgentLoggingLocalOutputLogBase", for OVS agent:
  "NeutronOVSAgentLoggingRateLimit",
  "NeutronOVSAgentLoggingBurstLimit",
  "NeutronOVSAgentLoggingLocalOutputLogBase" and for ML2/OVN backend:
  "NeutronOVNLoggingRateLimit", "NeutronOVNLoggingBurstLimit",
  "NeutronOVNLoggingLocalOutputLogBase".

* Adds NovaRestrictLiveMigration boolean parmeter to enable an api
  policy to allow live migration only for a specific role which can be
  customized using NovaRestrictLiveMigrationRole. This feature is to
  prevent the default admin role users to be able to use live
  migration on coincidence. Additional policies specified using
  NovaApiPolicies get merged with this policy.

* Adds new NovaCronArchiveDeleteRowsTaskLog parameter which controls
  to also archive task_log records while archiving the database.
  Defaults to true.

* OctaviaLogOffload is now enabled by default, it creates a rsyslog
  container of the controllers that collects logs from the Octavia
  amphorae.

* *OctaviaWorkers* and *HorizonWorkers* allow to configure the
  process workers count for the Octavia API and Horizon WSGI
  applications.

* With conditional monitoring enabled in OVN, southbound ovsdb-serve
  takes lot of time in handling the monitoring and sending the updates
  to all its connected clients. Its takes lot of CPU. With monitor-all
  option, all ovn-controllers do not enable conditional monitoring
  there by reducing the load on the Southbound ovsdb-server.

* Add support for OVS DPDK pmd auto balance parameters. This feature
  adds 3 new role specific THT parameters to set pmd-auto-lb-load-
  threshold, pmd-auto-lb-improvement-threshold, and pmd-auto-lb-rebal-
  interval in OVS through OvsPmdLoadThreshold,
  OvsPmdImprovementThreshold and OvsPmdRebalInterval respectively.

* Introduce new parameter to configure OVS PMD Auto Load Balance for
  OVS DPDK

* Users can now override or add individual entries to EndpointMap
  without having to specify complete EndpointMap in parameter_defaults
  section of an environment file.

* The new "PlacementPolicies" parameter has been added.

* Add support for the Pure Storage FlashBlade Manila driver

* The following parmaeters have been added so that users can change
  timeout for communication over rpc call.

  * "AodhRpcResponseTimeout"

  * "CeilometerRpcResponseTimeout"

  * "DesignateRpcResponseTimeout"

  * "HeatRpcResponseTimeout"

  * "IronicRpcResponseTimeout"

  * "ManilaRpcResponseTimeout"

  * "NeutronRpcResponseTimeout"

  * "NovaRpcResponseTimeout"

  * "OctaviaRpcResponseTimeout"

* The new "swift_recon_cron" container has been added to the
  SwiftStorage service, to reflect metrics related to async pendings
  to recon middleware in swift.


Upgrade Notes
*************

* Upgrades from OVN non-HA and OVN DBs pacemaker to OVN DBs
  clustered are currently not supported.

* Changes the ironic PXE container TFTP service from "in.tftpd" to
  use the "dnsmasq" TFTP service. This is because the "in.tftpd"
  service is not anticipated to be carried by Linux distributions
  moving forward, and "dnsmasq" is actively maintained.

* When upgrading an environment that uses collectd-write-qdr.yaml
  the CollectdAmqpInstances defaults previously specified need to be
  added to an administrator provided environment file and used during
  the overcloud deploy process.

* When upgrading a deployment with the use of enable-stf.yaml, add
  the following files to your overcloud deployment command in order to
  maintain the existing services defined in enable-stf.yaml.

     * environments/metrics/collectd-write-qdr.yaml

     * environments/metrics/ceilometer-write-qdr.yaml

     * environments/metrics/qdr-edge-only.yaml

* Mistral has been removed as it was Deprecated in Wallaby and is no
  longer in use.

* With the change to EndpointMap interface, existing environments
  where it has been overridden have to specify 'merge' strategy in a
  new 'parameter_merge_strategies' section.

* Support for Cavium/Liquidio has been removed.

* "`OS::TripleO::Services::LiquidioCompute`" has been removed and
  should be removed from role data during upgrade.

* The "`ComputeLiquidio`" role has been removed.

* The "CinderPowerStoreAppliances" parameter has been removed
  because it has had no effect since the actual parameter was
  deprecated in cinder.

* Support for the HPE Lefthand cinder driver has been removed.

* The "OS::TripleO::Services::CinderHPELeftHandISCSI" service was
  removed, so it should be removed from role data during upgrade.

* The "OctaviaPostWorkflowName" parameter has been removed.

* Zaqar has been removed as it was deprecated in Wallaby and is no
  longer in use on the undercloud. Additionally it hasn't been
  supproted in the overcloud.


Deprecation Notes
*****************

* The parameter IronicIPXEEnabled has been deprecated since Ironic
  uses per-node boot interfaces since Ussuri.

* The environment environments/deployed-server-deployed-neutron-
  ports.yaml, the deployed-neutron-port.yaml template, and
  DeployedServerPortMap parameter are deprecated in favor of
  NodePortMap, ControlPlaneVipData, and VipPortMap, which can be used
  with the generated environments/deployed-ports.yaml.

* The following parameters have been deprecated and have no effect.

  * ManilaIsilonDriverHandlesShareServers

  * ManilaVNXDriverHandlesShareServers

  * ManilaVMAXDriverHandlesShareServers

* The "ManilaCephFSCephFSEnableSnapshots" parameter has been
  deprecated, and has no effect now. Manila always enables snapshot
  support in Ceph FS backend since Wallaby.

* VPP service and Neutron ML2/VPP plugin are deprecated in Xena
  release. VPP service relies on puppet project which isn't maintained
  for a while. Neutron ML2/VPP plugin is not actively supported in
  TripleO. Both services would be disabled in future releases.

* This change deprecates the nova-libvirt-container-puppet.yaml
  heat- template which configures monolithic modular libvirt daemon.
  The newly added heat-template for modular libvirt daemons will be
  used to configure libvirt services in different containers.

* This change removes NetworkDeploymentActions and
  {{role.name}}NetworkDeploymentActions. Since we can no longer rely
  on the Heat stack action when using Ephemeral Heat in tripleo.

* The "Neutron(OVS|Vnic)VnicTypeBlackList" parameters are deprecated
  in favor of the new "Neutron(OVS|Sriov)VnicTypeProhibitList"
  parameters.

* The "NovaSchedulerQueryPlacementForAvailabilityZone" parameter has
  been deprecated. The parameter has no effect now.

* The "AdminToken" parameter has been deprecated. Use the new
  "KeystonePassword" parameter instead.


Security Issues
***************

* The OVN database servers in an OVN DBs clustering and TLS-
  everywhere deployment will listen on all IP addresses (0.0.0.0).
  This is a caveat that can only be addressed once RHBZ 1952038 is
  fixed.


Bug Fixes
*********

* The collectd-write-qdr.yaml no longer specifies a default
  CollectdAmqpInstances hash. When specified, it was not possible to
  override the parameter, resulting in a combined hash of the default
  values and the administrators custom values which could lead to
  unexpected issues.

* Default of the "NovaSyncPowerStateInterval" parameter has been
  changed from 0 to 600, to use the default value consistent with the
  one defined in nova.

* Fixes issues with PPC64le hardware utilization where documented
  steps require a "/tftpboot/ppc64le" folder to exist for artifacts to
  be placed as it is required path for the firmware loader in order to
  boot the kernel and ramdisk. The folder is now automatically created
  for the container.

* The neutron agent report interval was recently changed from the
  30s default to 300s. This caused issues whith timeouts when
  providing baremetal nodes. A new parameter
  IronicNeutronAgentReportInterval has been added with a default of
  30s so that the report interval specifically for the networking
  baremetal agent is restored. See bug: 1940838
  (https://bugs.launchpad.net/tripleo/+bug/1940838).

* NFSv4.2 is now there for long time and default in RHEL/CentOS 8.
  This changes the default for NovaNfsVersion to be v4.2 instead of v4
  to have this the new default.

* On the compute nodes, right now ssl certificates got created for
  libvirt, qemu-default, qemu-vnc and qemu-nbd. This is not required
  because the all services use the same NovaLibvirtNetwork network and
  therefore multiple certificates for the same hostname get created.
  Also from qemu point of view, if default_tls_x509_cert_dir and
  default_tls_x509_verify parameters get set for all certificates,
  there is no need to specify any of the other **_tls** config
  options. From Secure live migration with QEMU-native TLS
  (https://docs.openstack.org/nova/latest/admin/secure-live-migration-
  with-qemu-native-tls.html)

  The intention (of libvirt) is that you can just use the
  default_tls_x509_* config attributes so that you don’t need to set
  any other **_tls** parameters, unless you need different
  certificates for some services. The rationale for that is that some
  services (e.g. migration / NBD) are only exposed to internal
  infrastructure; while some sevices (VNC, Spice) might be exposed
  publically, so might need different certificates. For OpenStack this
  does not matter, though, we will stick with the defaults.

  Therefore with this change InternalTLSNbdCAFile,
  InternalTLSVncCAFile and InternalTLSQemuCAFile get removed (which
  defaulted to /etc/ipa/ca.crt anyways) and just use
  InternalTLSCAFile.

  Also all cerfificates get created when EnableInternalTLS is true to
  and mount all SSL certificates from the host. This is to prevent
  certificate information is not available in a qemu's process
  container environment if features get switched later, which has
  shown to be problematic.

* Add the missing **Workers* parameters into the low-memory
  footprint environment and set it to 1.


Other Notes
***********

* Using enable-stf.yaml now defines the expected configuration in
  OpenStack for use with Service Telemetry Framework. Removal of the
  defined resource_registry now requires passing additional
  environment files to enable the preferred data collectors and
  transport architecture, providing better flexibility to support
  additional architectures in the future.

* The "iscsi_tcp" module is no longer loaded to support the
  operation of the "ironic-conductor" container as the "iscsi"
  Deployment interface has been removed from Ironic.

* Parameter "DhcpAgentNotification" is set to "False" by default
  now. It should be set to "True" in case when Neutron DHCP agent is
  going to be deployed.  It shouldn't be enabled with ML2/OVN backend.

* These parameters can now be set per-role - DnfStreams,
  UpgradeInitCommand, UpgradeLeappCommandOptions,
  UpgradeLeappDevelSkip, UpgradeLeappToRemove, UpgradeLeappToInstall

Changes in tripleo-heat-templates 15.0.0..15.1.0
------------------------------------------------

b5ae7f846 Switch to rabbitmq fqdn hostnames and pass proper CA info
3cf046cce Add InternalApiNetwork entry in ServiceNetMap
28161b586 Default CephDashboardNetwork to storage_dashboard
bf6f11824 Add a note about how glance currently supports project personas
512ba5ed4 Fix swift "Could not enable rsyncd" error
c25eec5bf Limit collectds memory usage in the ansible part
768b66f88 Enable support for Libvirt modular daemons
c354d2113 Use frontend/backend sections in HAProxy config
68db3d3be Allow configuring secure RBAC in nova
8ad58943d Allow configuring secure RBAC in placement
1e2d02d9e Option to select the required DDP package
d0ee7e09e Nova: Remove usage of AvailabilityZoneFilter
bdbd440cb Implement project personas in custom designate policy file
43a685e4b Implement project personas in custom octavia policy file
4e307cfd6 Implement project personas in custom ironic policy file
88494c90d Implement project personas in custom nova policy file
c9635bf92 Implement a tool for converting policy.yaml files to heat templates
e7f90201b Add parameters for manila storage availability zones
56a58f88e Fix libvirt/qemu logs location
8d51d6d3f Fix swift log redirection
012121109 Manila: Hide password strings
16e59efb3 Refactor usage of the NovaSchedulerEnabledFilters parameter
b0de138b4 Explicitly point undercloud instead of localhost
33c1d9d34 Changing default tuned profile for ComputeVdpa
ec5d0afa1 Add missing *Workers into low-memory footprint env
d346aa94b Fix delegate_to to use group rather then undercloud
7fc781083 Only delete heat data in the DB if it exists
79dc2b994 Revert "Ensure startup files exist before containers might be started"
57a8efd40 Add a global configuration option for secure RBAC
60d77b37e Set cgroupns=host for neutron_dhcp and ovn-metadata
1a1fb2727 Update network-data v2 samples for ipv6
246d174f8 Add ipv6 network_data/vip_data for CI jobs
ea5dff48c Support project personas in cinder
66492002c Don't use *-dist.conf files in commands
978f29d8c Add parameter IronicDefaultBootMode
3cb006d53 Changed minversion in tox to 3.18.0
c9f0a5af0 Added support for Neutron loggings service plugin configuration
5bcf76da0 Fix kill-script for cgroups v2 and podman
e1a605833 Add environment to enable keystone in undercloud
c293dfc7b Deploy standalone ironic and neutron in undercloud
6a8fb43ed Revert "Configure ironic to do UEFI boot by default"
0c167aede Remove zaqar
cb630d03b Remove mistral
67bd75c8b Allow to set pacemaker cluster properties
f2015da4b Simplify mysql users creation
84e1a591d Swap xinetd/tftp-server for dnsmasq to support ironic-pxe operations
efd4ca085 Remove old ovndbs update workaround
5edb21ee3 Remove and replace NetworkDeploymentActions
c463d2068 Install python3-openstackclient after the leapp upgrade
ff3173bdc Guarantee that ovn-dbs-pcmk update_tasks are run when the cluster is up
523acec27 Fix typo in vip-data-default-network-isolation.yaml
9edbde38d Fix typo in sample network data
e8beaaf88 Add logging source for collectd
33d9d19a4 Configure api_base_uri to DesignateEndpoint URI
3f9191131 Add oidc options
a52294169 Remove setting ACLs during Upgrade
fcfa8ac23 Add CephRbdTrashPurgeInterval parameter
a0f308324 Allow configuration of the managed resource email address
27adf3bc7 Ensure startup files exist before containers might be started
46027a8f2 Allow configuring distributed image import
ae139dec6 Fix the CephDashboardNetwork default
dcb33e8c5 Adding json output to yaml-diff
f7121a846 Do not create mysql user if it already exists
128c2bcc2 CentOS 9: support restart of HA resources
e9f0a32e7 GnocchiArchivePolicy has been removed
db3996369 Revert "tripleo-podman: Enable podman.socket"
8a7201cd0 Manila: Deprecate ineffctive *DriverHandlesShareServers
a235b70b2 Fix the failure condition for HAproxy chgrp script
835c6a04b Revert "Adjust HAProxy script to allow for ID change"
ad2a13ab4 Check whether an HA resource already exists explicitly
5539bd8c1 NovaLiveMigrationPermitAutoConverge should default to True
151ca15e8 Consider GlanceMultistoreConfig when setting glance_pool
07fa9b17f Remove unused valid_exit_codes arg
6db0f74e2 Parameter to set api policy to limit live migration to role
c69733bb6 Enable Ceph RGW public port into firewall when using SSL
79e24494b Set DhcpAgentNotification to be "false" by default
4e77e1474 Revert "Disable postcopy for ovn/ovs-dpdk"
65ff578a7 Apache: increase the base timeout
733d1bad4 Disable cephadm when ceph is deployed
474182927 Explicitly set ironic::json_rpc::project_name
1ce490716 Environment for switching to using IPs for memcached
9574cd4d0 Add IronicNeutronAgentReportInterval parameter
236f14fe8 Stop rotating rabbitmq crash.log files via erlang's lager
91627638d Prefill host configuration for rsyslog-omamqp1
3100829b9 Configure ironic to do UEFI boot by default
823e4e867 Add http basic auth support for neutron api
a22ef3a0b Adjust HAProxy script to allow for ID change
47e348767 Glance: Replace deprecated os_region_name
7fe0d28ad Enable CephDashboard for scenario001
2e4361c87 container-puppet.sh idempotency on restart
99f04ef90 Create the tftpboot ppc64le folder
f11b5edc2 Add BGP EVPN support to the FRR service
580139d2f Setting language for the python3.6 tox environment
5ff274113 Make default of NovaSyncPowerStateInterval consistent with nova
06cc21a44 Manila: Drop tenant_id templating from v2 endpoint
e737e3f3a Remove deprecated ipv6 corosync parameters
72a12aa83 cinder_api needs etcd certs inside the container
073e581e6 Enable debug of memcached when Debug is enabled
8f6d13b7e Compute HA: Remove version discovery of keystone API
5771d9318 Remove StackAction from Octavia deployment
c73ecb196 cinder_api: Export /var/log/httpd on the host
ad942efe7 Fix missing ssh key in scenario010 job
61f67eff1 nova_libvirt_init_secret Give a proper error if ceph is not configured properly
c4bdaea3d Support both frr 7.x and frr-8.0 concurrently
b921b185f qdr: Add SSL support for oslo.messaging RPC
f0010f606 Add OctaviaAmphoraSshKeyDir for ssh key creation for Octavia
6d2901345 Add <service>_api_paste_ini in puppet_tags
bd7c489dc Ironic: Do not override bootfile_name
198786df2 Nova: Update puppet parameters to set castellan options
bec1ffeeb Change tests to run on ansible-core 2.11
b2b1915a3 Fix NovaNfsVersion parameter comment
ddb8acf32 Disable postcopy for ovn/ovs-dpdk
1896b10e2 Include octavia::driver_agent via puppet-tripleo
b0caee475 Revert change to use community pacemaker_cluster module
41380b510 Replace deprecated database_connection of puppet base classes
169e4e983 Replace deprecated glance::api::database_connection
feb93b26b Add DeployedCeph boolean parameter
be04d6fa9 Stop using tripleo_container_manage_systemd_order
f684a93aa Tidy up lingering todo's
8e0bd79c6 Enabling vhost-postcopy-support when live_migration_permit_post_copy
e104c6e62 Default ganesha-internal service endpoint to external network
dadb112a5 Add /run/frr volume mount
5ab70af5a Add param to configure neutron agent_down_time and report_interval
bd20c5958 Fix support for json-rpc in ironic
c4097a028 Make indentation consistent in pacemaker config_settings
30ddf4242 Add a role to run independent designate bind backends
74ae03602 Fix condition for pacemaker resource_op_defaults
a94ff466c Example configurable cap add
68d7d51e4 Remove iscsi_tcp module load
9b34719ed [c9] nova_libvirt with host's cgroupns
ad28f5da4 Wire up renamed upgrade periodic template
2d92ebf07 Add Pure Storage FlashBlade Manila driver
b6148410b Add support for setting min TTL limit in designate
e5ba54102 Set stop grace periods for designate services
2fb783508 Remove all docker related tasks from upgrades
810b81991 Do not fail if haproxy container UUID changes
ac5b3829b Enable archive task_log records while archiving the database
02b157ab2 Remove unused BarbicanPkcs11Crypto* parameters
119812b91 Remove usage of deprecated GnocchiArchivePolicy
35e701c61 Enable swift-recon-cron job
65b1f4290 Replace the deprecated nova::scheduler::filter::scheduler_max_attempts
ce660af8b nova: replace deprecated nova::cinder_catalog_info
53040573a Use yaml.safe_load to load YAML files
1115698c1 Fix typo in ovn-dbs-cluster northd kolla config file
d2298873f Role parameter for tripleo_kernel_defer_reboot
fd893918c Only reference _bundle manifests in cinder-{backup,volume}-pacemaker-puppet.yaml
bc934d18a Enable ovn-monitor-all option to ovn-controller
8d568bdb6 Change default for NovaNfsVersion to NFSv4.2
cf0b6a161 Add CephAdmDebug parameter
e0cb3c627 Deprecate ineffective ManilaCephFSCephFSEnableSnapshots
2b33594c1 Add OS version to check reboot happened
51fdc9c6b Add environments/deployed-networks.yaml
e04f4a618 Compute HA: Remove workaround for Newton and older
e5b1ae3c3 Add sample baremetal_deployment.yaml
7ade37b9f Default network configs to Train values
04cd218c8 tripleo-podman: Enable podman.socket
2001b48ca vncproxy: removal of tags and steps change from post_upgrade_tasks
712c6025d Remove unused OctaviaPostWorkflowName
2341c892f Skip yaml validation for releasenotes and zuul.d
a9ed08335 Enable enable_proxy_headers_parsing in Ironic API
f5f8f4fa7 Enable enable_proxy_headers_parsing in Barbican API
726ccc1bd Remove leftover of hieradata cleanup
30574f183 Test override of CephClusterName in 004 standalone
a191377b3 Add tool to convert net-data from v1 to v2
ead5443cb Replace LEAPP_DEVEL_SKIP_RHSM with LEAPP_NO_RHSM
62b17c21b Keystone: Keep default auth methods in OpenIDC Federation
c769343d8 Remove ineffective CinderPowerStoreAppliances parameter
cbd2842db Allow customizing policy rules for Placement Api
61ffbe989 Fix manila-cephfsganesha-config environment for cephadm
abed6abbe fix typo in readme
591f2aa2d Drop CollectdAmqpInstances from collectd-write-qdr.yaml
d98d6d1f5 Fix playbook_dir Ansible Warning
1aa0af059 Remove network/ports/vip[_v6].yaml
dce6bee2f Moves undercloud upgrade introspection data migration to step 1
f276e7a4a Make default of NeutronDefaultAvailabilityZones empty array
02c15818f Add heat-api environment
7010a2741 Introducing the ComputeVdpa role
1738ccfd2 Remove support for Cavium LiquidIO
feef0cc1e Add a cloud profile for system-admins
5ef7f9330 FFU: change transfer parameters for database resync
95ddd09c8 Remove unused definition of PythonInterpreter
cc0f113a6 Remove unused disable-unbound.yaml
6f0b375f7 Remove hieratada for ceilometer::agent::auth
ec1f6102e yaml-diff.py: Making it a bit better
514f6df76 placement: Adding Debug parameter
681fa9a22 Rename AdminToken to KeystonePassword
a2619ba57 Neutron: Rename VnicTypeBlacklist parameters
af351b783 Update puppet parameters for networking-baremetal
4dca2a483 Allow tuning rpc_response_timeout
ab4c114d5 Adjust enable-stf.yaml for latest recommendations
4aeb3f354 Enable image copy for multiple RBD Glance stores
f065bb96b Add parameters to specify auth_strategy
df4c7c8ce Use role var names from tripleo_podman
bc2a0339e Preface tasks path with {{playbook_dir}}
5460ec844 Fix ordering of Swift pipeline values
ad1ba1bc3 Add comment for libvirt/vnc network sync
978c058ef Enable LogOffload by default in Octavia
dd5a5fc24 Remove from master the ceph-ansible references
b1e992a73 Neutron: Use the pids subsystem to look up container id
26be31799 Deprecate DeployedServerPortMap
9da8a4059 Remove NovaVncProxyNetwork from ServiceNetMap
48918ea6d Enable healthcheck API in Octavia and Ironic
4da03adef Move ephemeral heat upgrade to the service
ef7254edd Cinder: Remove support for HPE Lefthand driver
3da428352 Designate: Clean up deprecated Rabbit* parameters
a96f333fa Neutron: Use placement user to talk with Placement service
5d5419a1f Octavia: Remove unused cleanup tasks of tls_proxy container
e0adac953 Enable octavia driver agent puppet
c904c7555 Explicit set qemu certificate group ownership
ff48f2ac1 Get roles data from stack output on UC upgrade
0b5b914e3 Add THT Jinja2 data sources as stack output
28105815c Extend UC ephemeral heat to export network
afc0d39dc Add Ephemeral Heat service
a6118661f Fix NetworkDeploymentActionValue format
18651160a Deprecate VPP service and Neutron ML2/VPP agent
fb67c2da9 Move scenario004 to cephadm
574cf2769 Drop mistral configuration from post deploy
8fb3a0b88 Use module for container puppet tasks
d9b6ed3fb Include tripleo container service management once
3b043e495 Always run network config for undercloud
ec444622d Add support for OVS DPDK pmd auto balance parameters.
91f06efb3 Do not run Swift rsync container in single replica mode
48fd886a0 Distribute iscsid.conf to all containers using iscsi
10e065219 Drop archive policy from enable-legacy-telemetry
f94c38476 Remove PciPassthroughFilter from NovaSchedulerAvailableFilters
d96a9c615 Neutron: Explicitly set the default hepervisor name
33f7868d5 Set tripleo_cephadm rbd mirror vars
94e31ab75 Enable DPDK OVS PMD Auto Load Balance
e85da3e9e Add post_upgrade_task and remove puppet-ceph pkg
d20f295f3 Simplify libvirt/qemu ssl certificates
baf4a1614 OVN DBs clustering
a263da138 Use merge strategy for EndpointMap
1ddef85c9 Add OVNAvailabilityZone to improve UX
b991086fe Move designate from experimental
feb63aba4 Add extra Ansible Variable perameter
dcddeb3b9 Make UpgradeLeappDevelSkip per-role
1eea4ca2e Add map merge strategy for {{role.name}}Parameters
a3814c08d Add service defined ansible_group_vars to RoleGroupVars
2f702f7bb Limit collectds memory usage
d2bbc3fbb Deprecate IronicIPXEEnabled
454b45c7d Set OS_CLOUD instead in stackrc
019419463 Use community.general ansible collection instead of modules
6837633ea Fix broken restart of ovndb_server during minor update
ed320d8a7 nova-compute: Adding failed_when to nova-compute stop task
c214e99b2 Bump ovs and ovn versions to 2.15 for FFWD.
ca732da9c nova-compute: Replacing yes/no with boolean values
a26b064bd Add missing monitoring_subscription to Placement
f86a22d33 Clean up DefaultPasswors
7b87fc691 Placement: Remove unused PlacementAPIInterface
d2132dd81 Honor the Debug parameter in Zaqar template
5b34e66a7 Honor the BackupAndRestoreHieraConfigFile parameter
82de22a43 Mark NeutronFirewallDriver deprecated properly
7dbcb4157 Neutron: Remove unused NeutronMechanismDrivers from dhcp-agent template
86d3f64b0 Nova: Remove unused password parameters
90ace4f68 Don't create ExtraConfig resources per role
857807247 Add support for designate standalone jobs
06e12a1b0 Placement: Remove the unused NovaPassword parameter
09bcacd25 Add support for keystone_authtoken/memcache_use_advanced_pool
be0b91ef5 Add network-v2 default files + vip data examples
035299cdc Remove all telemetry related redundant environments
fcac503da Nova: Remove useless authtoken hieradata from computes
7d0320ad9 Drop usage of removed tripleo::haproxy parameters
0bb24e11e Remove ENABLE_* environment about puglins not installed
c42ba433a Introducing the nova-cell environments
2225f9666 Support cinder image conversion on an NFS share
78e870712 Replace unused var 'net' with _
ab9f26b30 Remove or fix outdated/incorrect tripleo hieradata definitions
05dbd4761 Glance: Update puppet parameters to set castellan options
6dd006fc0 Add Python3 xena unit tests
e9901a7fb Update master for stable/wallaby
a7d238643 Make memcached port parameters globally available
4f2884ff6 Clean up usage of the deprecated aodh::auth class
2e9900e81 Set hieradata for the aodh::service_credentials class
a314ad3ae Enable proxy header parsing in Octavia API
67d188f51 Clean up leftovers of Midonet support
02bb4b8aa Remove or fix outdated/incorrect neutron hieradata definitions
d975e560a [VxFlex OS] Fix resource name typo in template


Diffstat (except docs and test files)
-------------------------------------

.gitignore                                         |    1 +
README.rst                                         |    4 -
baremetal-samples/baremetal_deployment.yaml        |   79 +
ci/environments/disable-unbound.yaml               |   57 -
ci/environments/scenario000-standalone.yaml        |    8 +-
.../scenario001-multinode-containers.yaml          |   41 +-
ci/environments/scenario001-standalone.yaml        |    8 +-
ci/environments/scenario002-standalone.yaml        |    6 +-
ci/environments/scenario003-standalone.yaml        |   18 +-
ci/environments/scenario004-standalone.yaml        |   61 +-
.../scenario007-multinode-containers.yaml          |    1 +
ci/environments/scenario007-standalone.yaml        |    1 +
.../scenario010-multinode-containers.yaml          |   38 +-
ci/environments/scenario010-standalone.yaml        |   39 +-
ci/environments/scenario012-standalone.yaml        |    1 +
ci/network_data_v6.yaml                            |   54 +
ci/vip_data_v6.yaml                                |    6 +
common/common-container-config-scripts.yaml        |    2 +-
common/container-puppet.sh                         |    1 +
common/deploy-steps-tasks-step-0.j2.yaml           |    2 +-
common/deploy-steps-tasks.yaml                     |    2 -
common/deploy-steps.j2                             |   35 +-
common/generate-config-tasks.yaml                  |   21 +-
common/host-container-puppet-tasks.yaml            |   22 +-
.../nova_libvirt_init_secret.sh                    |   10 +
.../pacemaker_mutex_restart_bundle.sh              |   15 +-
.../pacemaker_restart_bundle.sh                    |   30 +-
container_config_scripts/pacemaker_wait_bundle.sh  |   29 +-
deployed-server/README.rst                         |    2 +-
deployed-server/deployed-neutron-port.yaml         |   18 +
deployed-server/deployed-server.yaml               |   37 +-
deployment/aodh/aodh-api-container-puppet.yaml     |    6 +
deployment/aodh/aodh-base.yaml                     |   20 +-
deployment/apache/apache-baremetal-puppet.j2.yaml  |    6 +
.../backup-and-restore/rear-baremetal-ansible.yaml |    1 +
.../barbican/barbican-api-container-puppet.yaml    |   34 +-
deployment/barbican/barbican-client-puppet.yaml    |   20 +-
...ometer-agent-notification-container-puppet.yaml |    2 -
.../ceilometer-base-container-puppet.yaml          |   26 +-
deployment/ceph-ansible/ceph-base.yaml             |  760 ----
deployment/ceph-ansible/ceph-client.yaml           |   71 -
deployment/ceph-ansible/ceph-external.yaml         |   73 -
deployment/ceph-ansible/ceph-grafana.yaml          |  186 -
deployment/ceph-ansible/ceph-mds.yaml              |   81 -
deployment/ceph-ansible/ceph-mgr.yaml              |  179 -
deployment/ceph-ansible/ceph-mon.yaml              |  122 -
deployment/ceph-ansible/ceph-nfs.yaml              |  137 -
deployment/ceph-ansible/ceph-osd.yaml              |  137 -
deployment/ceph-ansible/ceph-rbdmirror.yaml        |   99 -
deployment/ceph-ansible/ceph-rgw.yaml              |  200 -
deployment/cephadm/ceph-base.yaml                  |  118 +-
deployment/cephadm/ceph-client.yaml                |    4 -
deployment/cephadm/ceph-external.yaml              |    4 -
deployment/cephadm/ceph-grafana.yaml               |    4 -
deployment/cephadm/ceph-mds.yaml                   |    3 -
deployment/cephadm/ceph-mgr.yaml                   |    4 -
deployment/cephadm/ceph-mon.yaml                   |    4 -
deployment/cephadm/ceph-nfs.yaml                   |    4 -
deployment/cephadm/ceph-osd.yaml                   |    4 -
deployment/cephadm/ceph-rbdmirror.yaml             |   28 +-
deployment/cephadm/ceph-rgw.yaml                   |    5 +-
deployment/cinder/cinder-api-container-puppet.yaml |   18 +-
.../cinder-backend-dellemc-powerstore-puppet.yaml  |    3 -
.../cinder/cinder-backup-container-puppet.yaml     |    2 +-
.../cinder/cinder-backup-pacemaker-puppet.yaml     |    4 +-
deployment/cinder/cinder-base.yaml                 |   11 +-
.../cinder/cinder-common-container-puppet.yaml     |   68 +-
.../cinder/cinder-hpelefthand-iscsi-puppet.yaml    |   73 -
.../cinder/cinder-scheduler-container-puppet.yaml  |    2 +-
.../cinder/cinder-volume-container-puppet.yaml     |    5 +-
.../cinder/cinder-volume-pacemaker-puppet.yaml     |    6 +-
deployment/database/mysql-base.yaml                |    6 -
deployment/database/mysql-container-puppet.yaml    |    4 +-
deployment/database/mysql-pacemaker-puppet.yaml    |   16 +
deployment/database/redis-container-puppet.yaml    |    2 +-
deployment/database/redis-pacemaker-puppet.yaml    |    2 +-
.../liquidio-compute-config-container-puppet.yaml  |  124 -
deployment/deprecated/mistral/mapping.json         |  373 --
.../mistral/mistral-api-container-puppet.yaml      |  270 --
deployment/deprecated/mistral/mistral-base.yaml    |  118 -
.../mistral/mistral-engine-container-puppet.yaml   |  141 -
.../mistral-event-engine-container-puppet.yaml     |  116 -
.../mistral/mistral-executor-container-puppet.yaml |  252 --
.../neutron-vpp-agent-baremetal-puppet.yaml        |    0
.../nova/nova-libvirt-container-puppet.yaml        |  222 +-
.../novajoin/novajoin-container-puppet.yaml        |    6 +
.../{ => deprecated}/vpp/vpp-baremetal-puppet.yaml |    0
.../deprecated/zaqar/zaqar-container-puppet.yaml   |  395 --
.../designate/designate-api-container-puppet.yaml  |   12 +-
.../designate/designate-base.yaml                  |   36 +-
.../designate/designate-bind-container.yaml        |    3 +-
.../designate-central-container-puppet.yaml        |   44 +-
.../designate/designate-mdns-container-puppet.yaml |   10 +-
.../designate-producer-container-puppet.yaml       |    3 +-
.../designate/designate-sink-container-puppet.yaml |    3 +-
.../designate-worker-container-puppet.yaml         |    3 +-
deployment/frr/frr-container-ansible.yaml          |   39 +-
deployment/glance/glance-api-container-puppet.yaml |   30 +-
.../glance/glance-api-edge-container-puppet.yaml   |   12 +
.../gnocchi/gnocchi-api-container-puppet.yaml      |   11 +-
deployment/haproxy/haproxy-container-puppet.yaml   |   11 +-
.../haproxy/haproxy-edge-container-puppet.yaml     |    6 -
deployment/haproxy/haproxy-public-tls-inject.yaml  |    5 +
deployment/heat/heat-api-container-puppet.yaml     |    2 +-
deployment/heat/heat-base-puppet.yaml              |   12 +-
deployment/heat/heat-engine-container-puppet.yaml  |    9 +-
.../heat/heat-ephemeral-container-ansible.yaml     |  124 +
deployment/horizon/horizon-container-puppet.yaml   |   30 +-
.../image-serve/image-serve-baremetal-ansible.yaml |    2 +-
deployment/ipa/ipaservices-baremetal-ansible.yaml  |    6 +-
deployment/ironic/ironic-api-container-puppet.yaml |   83 +-
deployment/ironic/ironic-base-puppet.yaml          |   18 +-
.../ironic/ironic-conductor-container-puppet.yaml  |  147 +-
.../ironic/ironic-inspector-container-puppet.yaml  |   75 +-
.../ironic-neutron-agent-container-puppet.yaml     |   44 +-
deployment/ironic/ironic-pxe-container-puppet.yaml |    6 +-
deployment/iscsid/iscsid-container-puppet.yaml     |    2 +-
.../kernel-boot-params-baremetal-ansible.yaml      |   16 +
deployment/keystone/keystone-container-puppet.yaml |  106 +-
deployment/logging/files/nova-libvirt.yaml         |   67 +-
deployment/logging/rsyslog-container-puppet.yaml   |   26 +
deployment/manila/manila-api-container-puppet.yaml |    6 +
deployment/manila/manila-backend-cephfs.yaml       |   65 +-
.../manila/manila-backend-flashblade-puppet.yaml   |   77 +
deployment/manila/manila-backend-isilon.yaml       |   37 +-
deployment/manila/manila-backend-netapp.yaml       |   52 +-
deployment/manila/manila-backend-unity.yaml        |   36 +-
deployment/manila/manila-backend-vmax.yaml         |   39 +-
deployment/manila/manila-backend-vnx.yaml          |   45 +-
deployment/manila/manila-base.yaml                 |   15 +-
.../manila/manila-scheduler-container-puppet.yaml  |    2 +-
.../manila/manila-share-container-puppet.yaml      |    4 +-
.../manila/manila-share-pacemaker-puppet.yaml      |    2 +-
.../memcached/memcached-container-puppet.yaml      |   26 +-
.../messaging/rpc-qdrouterd-container-puppet.yaml  |  100 +-
deployment/metrics/collectd-container-ansible.yaml |   14 +-
deployment/metrics/collectd-container-puppet.yaml  |   21 +-
deployment/metrics/qdr-container-ansible.yaml      |    3 -
deployment/neutron/kill-script                     |   11 +-
.../neutron/neutron-api-container-puppet.yaml      |   91 +-
deployment/neutron/neutron-base.yaml               |   21 +-
.../neutron/neutron-dhcp-container-puppet.yaml     |   43 +-
.../neutron/neutron-l3-container-puppet.yaml       |   56 +-
.../neutron/neutron-metadata-container-puppet.yaml |   42 +-
.../neutron-ovs-agent-container-puppet.yaml        |   26 +-
deployment/neutron/neutron-plugin-ml2-ovn.yaml     |   29 +-
deployment/neutron/neutron-plugin-ml2.yaml         |   37 +-
.../neutron-sriov-agent-container-puppet.yaml      |    3 +-
deployment/nova/nova-api-container-puppet.yaml     |   57 +-
deployment/nova/nova-apidb-client-puppet.yaml      |    7 +-
deployment/nova/nova-base-puppet.yaml              |   12 +-
deployment/nova/nova-compute-container-puppet.yaml |  131 +-
.../nova/nova-conductor-container-puppet.yaml      |    4 -
deployment/nova/nova-db-client-puppet.yaml         |    7 +-
deployment/nova/nova-ironic-container-puppet.yaml  |    4 +-
.../nova/nova-metadata-container-puppet.yaml       |    8 +-
.../nova-modular-libvirt-container-puppet.yaml     |  979 +++++
.../nova/nova-scheduler-container-puppet.yaml      |   19 +-
deployment/nova/nova-virt-common.yaml              |  158 +
.../nova/nova-vnc-proxy-container-puppet.yaml      |   20 +-
.../octavia/octavia-api-container-puppet.yaml      |   72 +-
deployment/octavia/octavia-base.yaml               |    5 +
.../octavia/octavia-deployment-config.j2.yaml      |   36 +-
.../octavia-health-manager-container-puppet.yaml   |    4 +-
.../octavia-housekeeping-container-puppet.yaml     |    2 +-
.../octavia/octavia-worker-container-puppet.yaml   |    2 +-
.../octavia/providers/ovn-provider-config.yaml     |    3 +
.../openvswitch-dpdk-baremetal-ansible.yaml        |  103 +-
.../ovn/ovn-controller-container-puppet.yaml       |   19 +-
deployment/ovn/ovn-dbs-cluster-ansible.yaml        |  307 ++
deployment/ovn/ovn-dbs-pacemaker-puppet.yaml       |   28 +-
deployment/ovn/ovn-metadata-container-puppet.yaml  |    8 +-
.../pacemaker/pacemaker-baremetal-puppet.yaml      |   66 +-
.../placement/placement-api-container-puppet.yaml  |   50 +-
deployment/podman/podman-baremetal-ansible.yaml    |   69 +-
deployment/qdr/qdrouterd-container-puppet.yaml     |    2 +-
deployment/rabbitmq/rabbitmq-container-puppet.yaml |   19 +-
...rabbitmq-messaging-notify-container-puppet.yaml |    2 +-
...rabbitmq-messaging-notify-pacemaker-puppet.yaml |    2 +-
.../rabbitmq-messaging-pacemaker-puppet.yaml       |    4 +-
.../rabbitmq-messaging-rpc-container-puppet.yaml   |    2 +-
.../rabbitmq-messaging-rpc-pacemaker-puppet.yaml   |    4 +-
deployment/swift/swift-proxy-container-puppet.yaml |   47 +-
.../swift/swift-storage-container-puppet.yaml      |  119 +-
.../timemaster/timemaster-baremetal-ansible.yaml   |    3 -
.../tripleo-packages-baremetal-puppet.yaml         |   22 +-
deployment/unbound/unbound-container-ansible.yaml  |   29 +
.../undercloud-upgrade-ephemeral-heat.yaml         |   54 -
deployment/undercloud/undercloud-upgrade.yaml      |   24 +-
environments/cavium-liquidio.yaml                  |   31 -
.../ceph-ansible/ceph-ansible-external.yaml        |   31 -
.../ceph-ansible/ceph-ansible-per-role.yaml        |   19 -
environments/ceph-ansible/ceph-ansible.yaml        |   25 -
environments/ceph-ansible/ceph-dashboard.yaml      |    5 -
environments/ceph-ansible/ceph-mds.yaml            |    2 -
environments/ceph-ansible/ceph-rbdmirror.yaml      |    2 -
environments/ceph-ansible/ceph-rgw.yaml            |    6 -
environments/cinder-dellemc-powerstore-config.yaml |    1 -
environments/cinder-dellemc-vxflexos-config.yaml   |    2 +-
environments/cinder-hpelefthand-config.yaml        |   13 -
environments/dcn-storage.yaml                      |    2 +-
environments/deployed-networks.yaml                |    2 +
environments/deployed-ports.j2.yaml                |   24 +
.../deployed-server-deployed-neutron-ports.yaml    |    8 +-
environments/disable-telemetry.yaml                |   21 -
environments/enable-designate.yaml                 |   19 +-
environments/enable-federation-openidc.yaml        |    2 +-
environments/enable-legacy-telemetry.yaml          |    5 +-
environments/enable-secure-rbac.yaml               | 4126 ++++++++++++++++++++
environments/enable-stf.yaml                       |   99 +-
.../lifecycle/undercloud-upgrade-prepare.yaml      |    1 -
environments/lifecycle/upgrade-prepare.yaml        |    2 +-
environments/low-memory-usage.yaml                 |   15 +-
environments/manila-cephfsganesha-config.yaml      |    5 +-
environments/manila-cephfsnative-config.yaml       |    1 -
environments/manila-flashblade-config.yaml         |   15 +
environments/memcached-use-ips.yaml                |    6 +
environments/metrics/collectd-write-qdr.yaml       |    8 -
environments/neutron-ml2-vpp.yaml                  |    4 +-
environments/neutron-ovs-dvr.yaml                  |    1 +
environments/nova-cell.yaml                        |   23 +
environments/ovs-hw-offload.yaml                   |   11 +-
environments/services-baremetal/mistral.yaml       |    6 -
.../services-baremetal/neutron-ovn-dvr-ha.yaml     |    1 -
.../services-baremetal/neutron-ovn-ha.yaml         |    1 -
environments/services-baremetal/neutron-sriov.yaml |   10 +-
environments/services/heat-api.yaml                |    2 +
environments/services/ironic-overcloud.yaml        |    3 +-
environments/services/mistral.yaml                 |    6 -
environments/services/neutron-mlnx-agent.yaml      |   11 +-
environments/services/neutron-ovn-dvr-ha.yaml      |    1 -
environments/services/neutron-ovn-ha.yaml          |    1 -
environments/services/neutron-ovn-sriov.yaml       |   10 +-
environments/services/neutron-ovn-standalone.yaml  |    1 -
environments/services/neutron-ovs-dpdk.yaml        |    6 +-
environments/services/neutron-ovs-dvr.yaml         |    1 +
environments/services/neutron-ovs.yaml             |    1 +
environments/services/neutron-sriov.yaml           |   10 +-
environments/services/undercloud-aodh.yaml         |    7 -
environments/services/undercloud-ceilometer.yaml   |    9 -
environments/services/undercloud-gnocchi.yaml      |    7 -
environments/services/vpp.yaml                     |    2 +-
environments/services/zaqar-swift-backend.yaml     |    4 -
environments/services/zaqar.yaml                   |    3 -
environments/ssl/enable-memcached-tls.yaml         |    3 -
environments/ssl/no-tls-endpoints-public-ip.yaml   |   82 -
environments/ssl/tls-endpoints-public-dns.yaml     |   54 +-
environments/ssl/tls-endpoints-public-ip.yaml      |   54 +-
environments/ssl/tls-everywhere-endpoints-dns.yaml |   11 +-
environments/standalone/standalone-overcloud.yaml  |    8 +-
environments/standalone/standalone-tripleo.yaml    |    8 +-
environments/storage/nova-nfs.yaml                 |    2 +-
environments/undercloud-enable-keystone.yaml       |   12 +
environments/undercloud-enable-nova.yaml           |   10 +-
environments/undercloud.yaml                       |   14 +-
environments/undercloud/undercloud-minion.yaml     |   14 +-
.../updates/update-from-ml2-ovs-from-rocky.yaml    |    1 -
extraconfig/post_deploy/undercloud_post.py         |   85 +-
extraconfig/post_deploy/undercloud_post.sh         |   24 +-
extraconfig/post_deploy/undercloud_post.yaml       |   27 +-
.../default-network-isolation-ipv6.yaml            |    5 +
network-data-samples/ganesha-ipv6.yaml             |    1 +
.../legacy-routed-networks-ipv6.yaml               |    9 +
network-data-samples/management-ipv6.yaml          |    1 +
network-data-samples/routed-networks-ipv6.yaml     |    5 +
network-data-samples/routed-networks.yaml          |    2 +-
.../vip-data-default-network-isolation.yaml        |   39 +
network-data-samples/vip-data-fixed-ip.yaml        |   35 +
network-data-samples/vip-data-routed-networks.yaml |   40 +
network/endpoints/build_endpoint_map.py            |  308 --
network/endpoints/endpoint_data.yaml               |  353 --
network/endpoints/endpoint_map.yaml                | 2709 +++----------
network/ports/vip.yaml                             |  122 -
network/ports/vip_v6.yaml                          |  112 -
network/service_net_map.j2.yaml                    |   14 +-
network_data_default.yaml                          |    7 +
overcloud-resource-registry-puppet.j2.yaml         |   99 +-
overcloud.j2.yaml                                  |   53 +-
puppet/role.role.j2.yaml                           |    2 +
.../notes/DdpPackage-581e67f08908ed51.yaml         |    5 +
.../OVNAvailabilityZone-bc3d44a7e11d83e5.yaml      |    5 +
...parameters-neutron-ironic-3d7330a7dc82f43d.yaml |    7 +
.../add-computevdpa-role-1f7c5df94d9900b6.yaml     |   11 +
...d-ovn-dbs-cluster-support-6193cba5be432865.yaml |   14 +
...ter-kernelargsdeferreboot-5b8e8b2f64c64a91.yaml |    7 +
..._distributed_image_import-97458c56a1ad95d9.yaml |    7 +
.../notes/agent_down_time-d6aebe530ca31b9e.yaml    |    8 +
.../notes/apache-timeout-d61a3910ce7dc162.yaml     |    5 +
...hange-ironic-tftp-service-21cc25629b15992f.yaml |    7 +
...cinder-nfs-conversion-dir-ba9b8dce515808ce.yaml |    8 +
...keystone-project-personas-b71c35c4c1a8bbd8.yaml |    9 +
.../notes/collectd-write-qdr-f790703e3f0c3245.yaml |   16 +
...precate-IronicIPXEEnabled-6cb68b0bfee5ac4d.yaml |    5 +
...-deployed-server-port-map-99d4d6a01f630d04.yaml |    7 +
...ver_handles_share_servers-d6af4e7c25c34c6e.yaml |    8 +
...la-cephfs-enable-snapshot-7857604802378720.yaml |    6 +
.../notes/deprecate-vpp-2911807152cd4b62.yaml      |    7 +
...-stf-no-resource-registry-db6ee6319964ab7f.yaml |   20 +
...sync-power-state-interval-90778dbcb0104130.yaml |    6 +
...64le-tftp-folder-creation-36e73d187334dbbe.yaml |    7 +
.../notes/glance_image_copy-34a3e62c48eaee0e.yaml  |   13 +
.../haproxy-frontend-backend-b253d26eeadbfb6b.yaml |    8 +
.../notes/ironic-boot-mode-07df530490bead50.yaml   |    6 +
...emcache_use_advanced_pool-41ca18221e60c05a.yaml |    7 +
.../notes/mistral-removal-df87b8dd8bf6bd4e.yaml    |    5 +
.../modular-libvirt-daemons-b5ad6043d6510077.yaml  |   31 +
.../notes/network-update-var-355dbbb4daee7f46.yaml |   14 +
...baremetal-report-interval-d08a44a147a1846e.yaml |   10 +
...ging-plugin-support-added-b2e1292d49e087c3.yaml |   12 +
...on-vnic_type_prohibitlist-21e23e511ca0e922.yaml |    5 +
...api_live_migration_policy-04fe402b554085b9.yaml |   10 +
..._compute_nfs_default_vers-e61d0bf78794be28.yaml |    6 +
...ive_deleted_rows-task_log-efbf0aac77aab128.yaml |    6 +
...t_ssl_cert_simplification-dbee541be9f55ce5.yaml |   30 +
...le-log-offload-by-default-53faec2d64688109.yaml |    6 +
.../octavia_service_workers-70887b5882ce0bb0.yaml  |    9 +
.../notes/ovn-monitor-all-2fefb215c6f7166c.yaml    |    8 +
.../ovs-dpdk-pmd-params-55df11e67acb6736.yaml      |    7 +
.../notes/ovs_dpdk_pmd-74f4cfa0ef280cc0.yaml       |    5 +
...rge-strategy-endpoint-map-83b8321c72421fd6.yaml |   11 +
.../notes/placement-policies-db2704ea63d0bdad.yaml |    4 +
.../purestorage_flashblade-75cbbdae48f233e0.yaml   |    4 +
...-availability-zone-filter-24a0f480bb2a345b.yaml |    5 +
.../notes/remove-cavium-2d8cbe8a5085517a.yaml      |   11 +
...der-powerstore_appliances-0a4905808b2b66f1.yaml |    5 +
.../remove-hpe-lefthand-23c6beaa777e3dfb.yaml      |    8 +
...nductor-iscsi-module-load-1e7d3c72a222196a.yaml |    6 +
...ctavia_post_workflow_name-84083c092cf79c8d.yaml |    4 +
.../notes/rename-admin-token-ae1b694f063035c8.yaml |    5 +
.../rpc_reponse_timeout-6feb5f62819b2eaf.yaml      |   15 +
...on-to-be-false-by-default-4fe7acaa60d2a95f.yaml |    6 +
.../notes/swift-recon-cron-8a3023ab693486bd.yaml   |    6 +
...ud-upgrade-ephemeral-heat-c838a9c61fc742a3.yaml |    9 +-
.../upgradeleapp-per-role-ad2e84e317ec1291.yaml    |    6 +
.../notes/zaqar-removal-6cdb31276d5a26dc.yaml      |    6 +
releasenotes/source/index.rst                      |    1 +
releasenotes/source/wallaby.rst                    |    6 +
roles/{ComputeLiquidio.yaml => ComputeVdpa.yaml}   |   22 +-
roles/Controller.yaml                              |    7 +-
roles/ControllerAllNovaStandalone.yaml             |    7 +-
roles/ControllerNoCeph.yaml                        |    7 +-
roles/ControllerNovaStandalone.yaml                |    7 +-
roles/ControllerOpenstack.yaml                     |    7 +-
roles/ControllerSriov.yaml                         |    7 +-
roles/ControllerStorageDashboard.yaml              |    7 +-
roles/ControllerStorageNfs.yaml                    |    7 +-
roles/DesignateBind.yaml                           |   42 +
roles/Standalone.yaml                              |    7 +-
roles/Undercloud.yaml                              |    7 +-
roles_data.yaml                                    |    7 +-
roles_data_undercloud.yaml                         |    7 +-
sample-env-generator/dcn.yaml                      |    2 +-
sample-env-generator/enable-services.yaml          |   12 +-
sample-env-generator/nova-cell.yaml                |   20 +
sample-env-generator/openidc.yaml                  |    2 +-
sample-env-generator/ssl.yaml                      |  221 +-
sample-env-generator/standalone.yaml               |   16 +-
sample-env-generator/undercloud-minion.yaml        |   17 +-
scripts/check-run-nova-compute                     |   56 +-
scripts/undercloud-upgrade-ephemeral-heat.py       |  168 +-
test-ansible-requirements.txt                      |    2 +-
tools/convert_policy_yaml_to_heat_template.py      |   73 +
tools/convert_v1_net_data.py                       |   74 +
tools/merge-new-params-nic-config-script.py        |    2 -
tools/process-templates.py                         |    2 +-
tools/render-ansible-tasks.py                      |   11 +-
tools/yaml-diff.py                                 |  127 +-
tools/yaml-validate.py                             |  154 +-
tox.ini                                            |   15 +-
tripleo_heat_templates/environment_generator.py    |    4 +
vip_data_default.yaml                              |    8 +
zuul.d/layout.yaml                                 |    3 +-
372 files changed, 10682 insertions(+), 9560 deletions(-)


Requirements updates
--------------------

diff --git a/test-ansible-requirements.txt b/test-ansible-requirements.txt
index 3e87cc19c..28fed0367 100644
--- a/test-ansible-requirements.txt
+++ b/test-ansible-requirements.txt
@@ -5 +5 @@ yaql>=1.1.3 # Apache 2.0 License
-ansible>=2.8.6 # GPL
+ansible-core<2.12 # GPL






More information about the Release-announce mailing list